69
Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads
(thehackernews.com)
This is a most excellent place for technology news and articles.
I assume the malicious part is that it phones home without permission, likely tracking users without their consent or informing them.